AesGcm.IsSupported and AesCcm.IsSupported should not unconditionally return true for MacOS

[vcsjones]

In #52030, AesGcm.IsSupported and AesCcm.IsSupported were introduced.

For macOS, these properties unconditionally return true even if there is no usable version of OpenSSL found on the system.

runtime/src/libraries/System.Security.Cryptography.Algorithms/src/System/Security/Cryptography/AesGcm.cs

Line 31 in 5a47690

public static bool IsSupported => true;

This leads to a somewhat bad experience. IsSupported will return true, but attempting to use AesGcm or AesCcm will result in a SIGABRT of the whole process, with the message "No usable version of libssl was found".

Ideally these properties would correctly handle OpenSSL not being available.

With ChaCha20Poly1305 the situation is slightly worse: The IsSupported property itself trigger the faulting behavior when it calls into the shim to ask if the current version of OpenSSL supports the algorithm.

[ghost]

Tagging subscribers to this area: @bartonjs, @vcsjones, @krwq, @GrabYourPitchforks
See info in area-owners.md if you want to be subscribed.

Issue Details

---

In #52030, AesGcm.IsSupported and AesCcm.IsSupported were introduced.

For macOS, these properties unconditionally return true even if there is no usable version of OpenSSL found on the system.

runtime/src/libraries/System.Security.Cryptography.Algorithms/src/System/Security/Cryptography/AesGcm.cs

Line 31 in 5a47690

public static bool IsSupported => true;

This leads to a somewhat bad experience. IsSupported will return true, but attempting to use AesGcm or AesCcm will result in a SIGABRT of the whole process, with the message "No usable version of libssl was found".

Ideally these properties would correctly handle OpenSSL not being available.

Author:	vcsjones
Assignees:	-
Labels:	area-System.Security, untriaged
Milestone:	-

[vcsjones]

Note: ChaChaPoly1305 suffers from the same issue which will be addressed with the AES cases. ChaChaPoly1305 does things a little differently, but it still tries to ask OpenSSL to do something when OpenSSL is not available and crashes the process.

EDIT: Oh @bartonjs updated the original issue with similar warning. 😄 . Will fix ChaCha as part of this.